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Qualys Announces Fourth Quarter and Full Year 2019 Financial Results 


2019 Revenue Growth of 15% Year-Over-Year 
Q4 Revenue Growth of 14% Year-Over-Year 
2019 GAAP EPS: $1.68; 2019 Non-GAAP EPS: $2.33 
Q4 GAAP EPS: $0.50; Q4 Non-GAAP EPS: $0.64 


Foster City, Calif., - February 12, 2020 — Qualys, Inc. (NASDAQ: QLYS), a pioneer and leading provider of cloud- 
based security and compliance solutions, today announced financial results for the fourth quarter and full year 
ended December 31, 2019. For the quarter, the Company reported revenues of $84.7 million, net income under 
United States Generally Accepted Accounting Principles (“U.S. GAAP”) of $20.7 million, non-GAAP net income of 
$26.0 million, Adjusted EBITDA of $37.6 million, GAAP earnings per diluted share of $0.50, and non-GAAP 
earnings per diluted share of $0.64. For the full year ended December 31, 2019, the Company reported revenues of 
$321.6 million, GAAP net income of $69.3 million, non-GAAP net income of $96.4 million, Adjusted EBITDA of 
$140.8 million, GAAP earnings per diluted share of $1.68 and non-GAAP earnings per diluted share of $2.33. 


“We are pleased to finish 2019 with another strong quarter that exhibited robust growth in Qualys Cloud Agent 
subscriptions and multiproduct adoption. Importantly, this year we delivered an impressive suite of new applications 
to our Qualys Cloud Platform, including Patch Management, Global IT Asset Discovery and Inventory, and 
Indication of Compromise 2.0, while producing record margins. The 2020 release of our Vulnerability Management, 
Detection and Response (VMDR) app will elevate Qualys’ market-leading vulnerability management solution to the 
next level by providing customers with one streamlined workflow to scan, investigate, prioritize and neutralize 
threats,” said Philippe Courtot, chairman and CEO of Qualys. “Prominent industry analyst, Ovum, recently reported 
that VMDR represents the next generation of vulnerability management, drastically reducing the time to 
remediation, while also reducing the operational and licensing costs.” 
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Figure 1: Evolution in vulnerability management 
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Fourth Quarter 2019 Financial Highlights 


Revenues: Revenues for the fourth quarter of 2019 increased by 14% to $84.7 million compared to $74.2 million 
for the same quarter in 2018. 


Gross Profit: GAAP gross profit for the fourth quarter of 2019 increased by 19% to $67.5 million compared to 
$56.7 million for the same quarter in 2018. GAAP gross margin percentage was 80% for the fourth quarter of 2019 
compared to 76% for the same quarter in 2018. Non-GAAP gross profit for the fourth quarter of 2019 increased by 
19% to $69.6 million compared to $58.6 million for the same quarter in 2018. Non-GAAP gross margin percentage 
was 82% for the fourth quarter of 2019 compared to 79% for the same quarter in 2018. 


Operating Income: GAAP operating income for the fourth quarter of 2019 increased by 51% to $19.5 million 
compared to $12.9 million for the same quarter in 2018. As a percentage of revenues, GAAP operating income was 
23% for the fourth quarter of 2019 compared to 17% for the same quarter in 2018. Non-GAAP operating income for 
the fourth quarter of 2019 increased by 37% to $31.4 million compared to $22.8 million for the same quarter in 
2018. As a percentage of revenues, non-GAAP operating income was 37% for the fourth quarter of 2019 compared 
to 31% for the same quarter in 2018. 


Net Income: GAAP net income for the fourth quarter of 2019 was $20.7 million, or $0.50 per diluted share, 
compared to $14.4 million, or $0.35 per diluted share, for the same quarter in 2018. Non-GAAP net income for the 
fourth quarter of 2019 was $26.0 million, or $0.64 per diluted share, compared to non-GAAP net income of $21.3 
million, or $0.51 per diluted share, for the same quarter in 2018. 


Adjusted EBITDA: Adjusted EBITDA (a non-GAAP financial measure) for the fourth quarter of 2019 increased by 
29% to $37.6 million compared to $29.1 million for the same quarter in 2018. As a percentage of revenues, 
adjusted EBITDA was 44% for the fourth quarter of 2019 compared to 39% for the same quarter in 2018. 


Operating Cash Flow: Operating cash flow for the fourth quarter of 2019 increased by 26% to $33.7 million 
compared to $26.6 million for the same quarter in 2018. As a percentage of revenues, operating cash flow was 
40% for the fourth quarter of 2019 compared to 36% for the same quarter in 2018. 


Fourth Quarter 2019 Business Highlights 


Select New Customers: 

Circle K, City of Coral Springs, Computer Generated Solutions, Department for International Development, 
Electronics for Imaging, First National of Nebraska, Genius Sports, Roblox Corporation, Saudi Electricity Company, 
Schneider Electric, Southwest Gas Corp, Veon Amsterdam B.V., and Waystar. 


Business Highlights: 

e Introduced Qualys VMDR - Vulnerability Management, Detection and Response, a next-level solution 
delivering a continuous cycle of protection from a single pane of glass with built-in orchestration workflows and 
real-time vulnerability detection to prioritize, remediate and audit across hybrid IT environments. 

e Partnered with Microsoft to integrate Qualys Vulnerability Management and Qualys Container Security into 
Microsoft Azure providing the capabilities to all Azure Security Center Standard Edition customers for virtual 
machines and to customers using Azure Security Center's Advanced Threat Protection for Azure Kubernetes 
Services. 

e Launched a partnership with Google to natively embed the Qualys Cloud Agent into the Google Cloud 
Platform, delivering one-click integration that automatically installs the Qualys Cloud Agent and reports 
vulnerabilities directly into the Google Security Command Center. 


e Released the Global IT Asset Discovery and Inventory app, built on the Qualys FedRAMP-authorized Cloud 
Platform, to federal government customers. 


Full Year 2019 Financial Highlights 
Revenues: Revenues for 2019 increased by 15% to $321.6 million compared to $278.9 million for 2018. 


Gross Profit: GAAP gross profit for 2019 increased by 19% to $252.1 million compared to $212.7 million for 2018. 
GAAP gross margin percentage was 78% for 2019 compared to 76% for 2018. Non-GAAP gross profit increased 
by 19% to $260.3 million for 2019 compared to $218.8 million for 2018. Non-GAAP gross margin percentage was 
81% for 2019 compared to 78% for 2018. 


Operating Income: GAAP operating income for 2019 was $72.3 million compared to $50.4 million for 2018. As a 
percentage of revenues, GAAP operating income was 22% for 2019 compared to 18% for 2018. Non-GAAP 
operating income for 2019 was $115.7 million compared to $87.2 million for 2018. As a percentage of revenues, 
non-GAAP operating income was 36% for 2019 compared to 31% for 2018. 


Net Income: GAAP net income for 2019 was $69.3 million, or $1.68 per diluted share, compared to $57.3 million, 
or $1.37 per diluted share, for 2018. Non-GAAP net income for 2019 was $96.4 million, or $2.33 per diluted share, 
compared to non-GAAP net income of $73.4 million, or $1.75 per diluted share, for 2018. 


Adjusted EBITDA: Adjusted EBITDA (a non-GAAP financial measure) for 2019 increased by 25% to $140.8 million 
compared to $112.4 million for 2018. As a percentage of revenues, Adjusted EBITDA was 44% for 2019 compared 
to 40% for 2018. 


Operating Cash Flow: Operating cash flow for 2019 was $160.6 million compared to $125.5 million for 2018. As a 
percentage of revenues, operating cash flow was 50% in 2019 compared to 45% in 2018. 


Full Year 2019 Business Highlights 


Market Recognition 
e Recognized by IDC for the fourth year in a row as the revenue share leader in the $1.1 billion Worldwide 
Device Vulnerability Assessment Market, and as having the fifth largest market share in the $9.3 billion 
Worldwide Cybersecurity Analytics, Intelligence, Response, and Orchestration Revenue Market for 2018. 
e Computing named Qualys the winner of its Enterprise Security Award, recognizing the Qualys Cloud Platform 
and associated apps for simplifying IT security operations and lowering the cost of compliance by delivering 
critical security intelligence on demand. 


Products & Features 

e Introduced Qualys VMDR - Vulnerability Management, Detection and Response, a next-level solution 
delivering a continuous cycle of protection from a single pane of glass with built-in orchestration workflows and 
real-time vulnerability detection to prioritize, remediate and audit across hybrid IT environments. 

e Launched the Qualys Global IT Asset Discovery and Inventory app as a free service, which provides Security 
and IT teams a single source of truth to analyze their complex and interconnected global IT environments and 
enables collaboration on critical security remediation efforts quickly. 

e Released Patch Management (PM), a new Cloud App that provides automated patch deployment capabilities, 
enabling customers to transparently orchestrate full-lifecycle vulnerability management of operating systems 
and third-party software across global hybrid environments. 


e Introduced the Qualys Indication of Compromise (IOC) 2.0 app, which leverages the Qualys Cloud Agent to 
provide enhanced attack detection, investigation and response for security analysts, incident responders, and 
managed security service providers. 

e Released the Global IT Asset Discovery and Inventory app, built on the Qualys FedRAMP-authorized Cloud 
Platform, to federal government customers. 

e Unveiled a new Cloud Agent Gateway (CAG) Service, an extension of the Cloud Agent Platform, that 
drastically simplifies large-scale deployments across on-premises and hybrid cloud environments. 

e Acquired the software assets of Adya, Inc., enabling Qualys to provide companies of all sizes with the ability to 
consolidate administration of their Software as a Service (SaaS) applications into one console, manage 
license costs across SaaS applications, set and enforce security policies in one place, and report and audit on 
all activity with a single tool. 


Business Development 

e Partnered with Microsoft to integrate Qualys Vulnerability Management and Qualys Container Security Apps 
into Microsoft Azure, providing the capabilities to all Azure Security Center Standard Edition customers for 
virtual machines and to customers using Azure Security Center’s Advanced Threat Protection for Azure 
Kubernetes Services. 

e Launched a partnership with Google to natively embed the Qualys Cloud Agent into the Google Cloud 
Platform, delivering one-click integration that automatically installs the Qualys Cloud Agent and reports 
vulnerabilities directly into the Google Security Command Center. 

e Expanded the Qualys Global Cloud Platform to the Canadian market, bringing the total number of global 
operations sites to eight locations on three continents. 

e Announced that X-Force Red, IBM Security's team of veteran hackers, will integrate Qualys’ new dynamic 
Patch Management solution with X-Force Red's Vulnerability Management Services to automate vulnerability 
prioritization and patching, enabling clients to simplify vulnerability remediation and fix their most critical 
vulnerabilities using less resources and time. 

e Partnered with Proficio, a global managed security service provider, who integrated the Qualys suite of cloud- 
based solutions into its managed detection and response capabilities. 

e Selected by the Center for Internet Security (CIS) to provide its members with continuous monitoring of 
internet-facing digital certificates and SSL/TLS configurations. 

e Established a partnership with Coalfire to integrate Qualys vulnerability management and continuous 
monitoring capabilities into Coalfire's Secure Cloud Automation Services (SCAS). 


Financial Performance Outlook 


First Quarter 2020 Guidance: Management expects revenues for the first quarter of 2020 to be in the range of 
$85.7 million to $86.4 million, representing 14% to 15% growth over the same quarter in 2019. GAAP net income 
per diluted share is expected to be in the range of $0.35 to $0.37, which assumes an effective income tax rate of 
24%. Non-GAAP net income per diluted share is expected to be in the range of $0.60 to $0.62, which assumes 
non-GAAP effective income tax rate of 21%. First quarter 2020 earnings per share estimates are based on 
approximately 40.9 million weighted average diluted shares outstanding for the quarter. 


Full Year 2020 Guidance: Management expects revenues for the full year 2020 to be in the range of $364 million 
to $369 million, representing 13% to 15% growth over 2019. GAAP net income per diluted share is expected to be 
in the range of $1.60 to $1.65, which assumes an effective income tax rate of 24%. Non-GAAP net income per 
diluted share is expected to be in the range of $2.57 to $2.62, which assumes a non-GAAP effective income tax 
rate of 21%. Full year 2020 earnings per share estimates are based on approximately 40.9 million weighted 
average diluted shares outstanding. 


Investor Conference Call 


Qualys will host a conference call and live webcast to discuss its fourth quarter and full year 2019 financial results 
at 4:45 p.m. Eastern Time (1:45 p.m. Pacific Time) on Wednesday, February 12, 2020. To access the conference 
call, dial (877) 881-2609 in the U.S. or (970) 315-0463 for international participants with conference ID #3389315. A 
live webcast of the earnings conference call, investor presentation, prepared remarks, and supplemental historical 


financial spreadsheet can be accessed at https://investor.qualys.com/events-presentations. A replay of the 


conference call will be available through the same webcast link following the end of the call. 


Investor Contact 


Vinayak Rao 

Vice President, Corporate Development and Investor Relations 
(650) 801-6210 

ir lys.com 


About Qualys, Inc. 


Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of cloud-based IT, security and compliance 
solutions with over 15,700 active customers in more than 130 countries, including a majority of each of the Forbes 
Global 100 and Fortune 100. Qualys helps organizations streamline and consolidate their IT, security and 
compliance solutions in a single platform and build security into digital transformation initiatives for greater agility, 
better business outcomes and substantial cost savings. The Qualys Cloud Platform and its integrated Cloud Apps 
deliver businesses critical security intelligence continuously, enabling them to automate the full spectrum of 
auditing, compliance and protection for IT systems and web applications across on premises, endpoints, cloud, 
containers, and mobile environments. Founded in 1999 as one of the first SaaS security companies, Qualys has 
established strategic partnerships with leading cloud providers like Amazon Web Services, Microsoft Azure and the 
Google Cloud Platform, and managed service providers and consulting organizations including Accenture, BT, 
Cognizant Technology Solutions, Deutsche Telekom, DXC Technology, Fujitsu, HCL Technologies, IBM, Infosys, 
NTT, Optiv, SecureWorks, Tata Communications, Verizon and Wipro. The company is also a founding member of 
the Cloud Security Alliance. For more information, please visit www.qualys.com. 


Qualys and the Qualys logo are proprietary trademarks of Qualys, Inc. All other products or names may be 
trademarks of their respective companies. 


Legal Notice Regarding Forward-Looking Statements 


This press release contains forward-looking statements within the meaning of Section 27A of the Securities Act of 
1933 and Section 21E of the Securities Exchange Act of 1934. Forward-looking statements generally relate to 
future events or our future financial or operating performance. Forward-looking statements in this press release 
include, but are not limited to, statements related to: our expectations regarding our Qualys Cloud Platform 
innovation and the capabilities of our platform; our expectations regarding the growth and market acceptance of our 
Vulnerability Management, Detection, and Response application; the benefits of our strategic acquisitions; the 
benefits of our new products, integrations, collaborations and joint solutions; our strategy and our business model 
and our ability to execute such strategy; our guidance for revenues, GAAP EPS and non-GAAP EPS for the first 
quarter and full year 2020, and our expectations for the number of weighted average diluted shares outstanding 


and the GAAP and non-GAAP effective income tax rate for the first quarter and full year 2020. Our expectations 
and beliefs regarding these matters may not materialize, and actual results in future periods are subject to risks and 
uncertainties that could cause actual results to differ materially from those projected. These risks include our ability 
to continue to develop platform capabilities and solutions; the ability of our platform and solutions to perform as 
intended; customer acceptance and purchase of our existing solutions and new solutions; real or perceived defects, 
errors or vulnerabilities in our products or services; our ability to retain existing customers and generate new 
customers; the budgeting cycles, seasonal buying patterns and length of our sales cycle; our ability to manage 
costs as we increase our customer base and the number of our platform solutions; the market for cloud solutions 
for IT security and compliance not increasing at the rate we expect; competition from other products and services; 
fluctuations in currency exchange rates, unexpected fluctuations in our effective income tax rate on a GAAP and 
non-GAAP basis, our ability to effectively manage our rapid growth and our ability to anticipate future market needs 
and opportunities; any unanticipated accounting charges; and general market, political, economic and business 
conditions in the United States as well as globally. The forward-looking statements contained in this press release 
are also subject to other risks and uncertainties, including those more fully described in our filings with the 
Securities and Exchange Commission, including our Quarterly Report on Form 10-Q for the quarter ended 
September 30, 2019, filed with the Securities and Exchange Commission on October 31, 2019. 


The forward-looking statements in this press release are based on information available to Qualys as of the date 
hereof, and Qualys disclaims any obligation to update any forward-looking statements, except as required by law. 


Non-GAAP Financial Measures 


In addition to reporting financial results in accordance with GAAP, Qualys provides investors with certain non- 
GAAP financial measures, including non-GAAP gross profit, non-GAAP gross margin, non-GAAP operating 
expenses, non-GAAP operating income, non-GAAP net income, non-GAAP net income per diluted share, adjusted 
EBITDA (defined as earnings before interest expense, interest income and other income (expense), net, taxes, 
depreciation, amortization, stock-based compensation, non-recurring expenses, and acquisition-related expenses 
that do not reflect ongoing costs of operating the business) and non-GAAP free cash flows (defined as cash 
provided by operating activities less purchases of property and equipment and principal payments under capital 
lease). 


In computing non-GAAP financial measures, Qualys excludes the effects of stock-based compensation expense, 
non-recurring expenses and acquisition-related expenses that do not reflect ongoing costs of operating the 
business. Qualys believes that these non-GAAP financial measures help illustrate underlying trends in its business 
that could otherwise be masked by the effect of the income or expenses, as well as the related tax effects, that are 
excluded in non-GAAP gross profit, non-GAAP gross margin, non-GAAP operating expenses, non-GAAP operating 
income, non-GAAP net income, non-GAAP net income per diluted share, adjusted EBITDA and non-GAAP free 
cash flows. 


Furthermore, Qualys uses some of these non-GAAP financial measures to establish budgets and operational goals 
for managing its business and evaluating its performance. Qualys believes that non-GAAP gross profit, non-GAAP 
gross margin, non-GAAP operating expenses, non-GAAP operating income, non-GAAP net income, non-GAAP net 
income per diluted share, adjusted EBITDA and non-GAAP free cash flows provide additional tools for investors to 
use in comparing its recurring core business operating results over multiple periods with other companies in its 
industry. 


Although Qualys does not focus on quarterly billings, Qualys provides calculated current billings (defined as total 
revenue recognized in a period plus the sequential change in current deferred revenue in the corresponding period) 
to assist investors and analysts in assessing its operating performance. 


Qualys has not reconciled non-GAAP net income per diluted share guidance to GAAP net income per diluted share 
guidance because Qualys does not provide guidance on the various reconciling cash and non-cash items between 
GAAP net income and non-GAAP net income (i.e., stock-based compensation and non-recurring expenses). The 
actual dollar amount of reconciling items in the first quarter and full year 2020 is likely to have a significant impact 
on the Company’s GAAP net income per diluted share in the first quarter and full year 2020. Accordingly, a 
reconciliation of the non-GAAP net income per diluted share guidance to the GAAP net income per diluted share 
guidance is not available without unreasonable effort. 


In order to provide a more complete picture of recurring core operating business results, the Company’s non-GAAP 
net income and non-GAAP net income per diluted share include tax adjustments required to achieve the effective 
income tax rate on a non-GAAP basis, which could differ from the GAAP effective income tax rate. The Company 
believes its estimated non-GAAP effective income tax rate of 21% in 2020 is a reasonable estimate under its global 
operating structure. The Company may adjust this rate during the year to take into account events or trends that it 
believes materially impact the estimated annual rate. The non-GAAP effective income tax rate could be subject to 
change for a number of reasons, including but not limited to, significant changes resulting from tax legislation, 
material changes in geographic mix of revenues and expenses and other significant events. 


The presentation of this non-GAAP financial information is not intended to be considered in isolation or as a 
substitute for results prepared in accordance with GAAP. A reconciliation of the non-GAAP financial measures 
discussed in this press release to the most directly comparable GAAP financial measures is included with the 
financial statements contained in this press release. Management uses both GAAP and non-GAAP information in 
evaluating and operating its business internally and as such has determined that it is important to provide this 
information to investors. 


Qualys, Inc. 


CONDENSED CONSOLIDATED STATEMENTS OF OPERATIONS 


2019 
Revenues $ 84,664 
Cost of revenues‘) 17,163 
Gross profit 67,501 
Operating expenses: 
Research and development ‘” 17,808 
Sales and marketing” 19,344 
General and administrative” 10,804 
Total operating expenses 47,956 
Income from operations 19,545 
Other income (expense), net: 
Interest expense (8) 
Interest income 2,052 
Other income (expense), net (287) 
Total other income (expense), net 1,757 
Income before income taxes 21,302 
Provision (benefit) for income taxes 638 
Net income $ 20,664 
Net income per share: —-  .- = 
Basic $ 0.53 
Diluted $ 0.50 
Weighted average shares used in computing net income per share: 
Basic 39,003 
Diluted 40,921 
( Includes stock-based compensation as follows: 
Cost of revenues $ 588 
Research and development 3,276 
Sales and marketing 1,395 
General and administrative 4,470 
Total stock-based compensation $ 9,729 


(Unaudited) 


(in thousands, except per share data) 


Three Months Ended December 31, 


2018 
$ 74,200 
17,525 
56,675 


15,073 
19,341 

9,318 
43,732 
12,943 


(60) 
1,887 


1,862 

14,805 

405 

$ 14,400 


0.37 
0.35 


39,200 
41,580 


$ 601 
2,207 

981 

3,629 

$ 7,418 


Twelve Months Ended December 31, 


2019 2018 
$ 321,607 $ 278,889 
69,517 66,185 
252,090 212,704 
68,239 53,255 
70,833 70,039 
40,765 39,049 
179,837 162,343 
72,253 50,361 
(106) (171) 
8,443 6,080 


(607) (802) 
7,730 5,107 


79,983 55,468 
10,647 (1,836) 
s o â ew so o 
$ 1.77 $ 1.47 
1.68 $ 1.37 
39,075 38,876 
41,345 41,897 
$ 2,262 $ 2,489 
11,151 7,961 
4,984 4,650 
16,495 14,990 
So a $80,000 


Qualys, Inc. 
CONDENSED CONSOLIDATED BALANCE SHEETS 
(Unaudited) 
(in thousands) 


December 31, 
2019 
Assets 
Current assets: 
Cash and cash equivalents $ 87,559 
Short-term marketable securities 211,331 
Accounts receivable, net 78,034 
Prepaid expenses and other current assets 18,692 
Total current assets 395,616 
Long-term marketable securities 119,508 
Property and equipment, net 60,579 
Operating leases - right of use asset 40,551 
Deferred tax assets, net 18,830 
Intangible assets, net 16,795 
Goodwill 7,447 
Restricted cash 1,200 
Other noncurrent assets 15,082 
Total assets $ 675,608 
Liabilities and Stockholders’ Equity 
Current liabilities: 
Accounts payable $ 848 
Accrued liabilities 22,784 
Deferred revenues, current 192,172 
Operating lease liability, current 7,663 
Total current liabilities 223,467 
Deferred revenues, noncurrent 20,935 
Operating lease liability, noncurrent 44,015 
Other noncurrent liabilities 388 
Total liabilities 288,805 
Stockholders’ equity: 
Common stock 39 
Additional paid-in capital 362,408 
Accumulated other comprehensive income (loss) 1,162 
Retained earnings 23,194 
Total stockholders’ equity 386,803 


Total liabilities and stockholders’ equity $ 675,608 


December 31, 
2018 


41,026 
248,140 
75,825 
13,974 
378,965 
76,710 
61,442 
26,387 
21,976 
7,225 
1,200 
11,775 
585,680 


5,588 
26,695 
164,624 
196,907 
20,423 
10,361 
227,691 


39 
330,572 
(586) 
27,964 
357,989 
585,680 


Qualys, Inc. 


CONDENSED CONSOLIDATED STATEMENT OF CASH FLOWS 


(Unaudited) 
(in thousands) 


Cash flow from operating activities: 
Net income 
Adjustments to reconcile net income to net cash provided by 
operative activities: 
Depreciation and amortization expense 
Bad debt expense 
Loss on disposal of property and equipment 
Stock-based compensation 
Amortization of premiums and accretion of discounts on marketable securities 
Deferred income taxes 
Changes in operating assets and liabilities: 
Accounts receivable 
Prepaid expenses and other assets 
Accounts payable 
Accrued liabilities 
Deferred revenues 
Other noncurrent liabilities 
Net cash provided by operating activities 
Cash flow from investing activities: 
Purchases of marketable securities 
Sales and maturities of marketable securities 
Purchases of property and equipment 
Business combinations 
Purchase of privately-held investment 
Net cash used in investing activities 
Cash flow from financing activities: 
Proceeds from exercise of stock options 
Payments for taxes related to net share settlement of equity awards 
Principal payments under capital lease obligations 
Repurchase of common stock 
Net cash used in financing activities 
Net increase in cash, cash equivalents and restricted cash 
Cash, cash equivalents and restricted cash at beginning of period 
Cash, cash equivalents and restricted cash at end of period 


Twelve Months Ended 
December 31, 
2019 2018 

69,336 $ 57,304 
31,201 28,904 
247 86 

202 9 
34,892 30,090 
(1,597) (1,136) 
7,095 (2,521) 
(2,456) (11,467) 
(6,012) (4,970) 
(1,076) 3,515 
715 1,426 
28,060 24,725 
3 (501) 
160,607 125,464 
(331,131 (339,862) 
328,350 285,224 
(27,573 (22,775) 
(4,050 (13,633) 
(625 (2,500) 
(35,029 (93,546) 
24,831 24,053 
(15,743 (14,879) 
(1,709 (1,617) 
(86,424 (85,040) 
(79,045 (77,483) 
46,533 (45,565) 

42,226 87,791 
88,759 $ 42,226 


Qualys, Inc. 

RECONCILIATION OF NON-GAAP DISCLOSURES 
EBITDA AND ADJUSTED EBITDA 
(Unaudited) 

(in thousands) 


Three Months Ended December 31, Twelve Months Ended December 31, 
2019 2018 2019 2018 

Net income $ 20,664 $ 14,400 $ 69,336 $ 57,304 
Depreciation and amortization of property and equipment 6,195 6,317 25,121 25,179 
Amortization of intangible assets 1,520 1,364 6,080 3,725 
Provision for (Benefit from) income taxes 638 405 10,647 (1,836) 
Stock-based compensation 9,729 7,418 34,892 30,090 
Other income (expense), net (1,757) (1,862) (7,730) (5,107) 
Acaquisition-related expenses '*) ® © (4) 585 1,099 2,439 3,025 
Adjusted EBITDA $ 37,574 $ 29,141 $ 140,785 $ 112,380 


= 


(1) For three months ended December 31, 2019, includes $0.1 million and $0.4 million of compensation related to acquisitions in 
2019 and 2018, respectively. 

(2) For twelve months ended December 31, 2019, includes $0.7 million, $3.0 million and $0.1 million of compensation related to 
acquisitions in 2019, 2018 and 2017, respectively, offset by $1.4 million of reversals of previous obligations. 

(3) For three months ended December 31, 2018, includes $1.0 million and $0.04 million of compensation related to acquisitions in 
2018 and 2017, respectively. 


(4) For twelve months ended December 31, 2018, includes $1.0 million and $2.0 million of compensation related to acquisitions in 
2018 and 2017, respectively. 


Qualys, Inc. 


RECONCILIATION OF NON-GAAP DISCLOSURES 


(Unaudited) 
(in thousands, except per share data) 
Three Months Ended 
December 31, 
2019 2018 
GAAP Cost of revenues $ 17,163 $ 17,525 
Less: Stock-based compensation (588) (601) 
Less: Acquisition-related expenses g - - 
Less: Amortization of intangible assets (1,495) (1,339) 
Non-GAAP Cost of revenues $ 15,080 15,585 
GAAP Gross profit $ 67,501 56,675 
Plus: Stock-based compensation 588 601 
Plus: Acquisition-related expenses “” - - 
Plus: Amortization of intangible assets 1,495 1,339 
Non-GAAP Gross Profit $ 69,584 58,615 
GAAP Research and development $ 17,808 15,073 
Less: Stock-based compensation (3,276 (2,207) 
Less: Acquisition-related expenses “” (584 (1,099) 
Less: Amortization of intangible assets (25 (25) 
Non-GAAP Research and development $ 13,923 11,742 
GAAP Sales and marketing $ 19,344 19,341 
Less: Stock-based compensation (1,395) (981) 
Less: Acquisition-related expenses “” d 5 
Non-GAAP Sales and marketing $ 17,948 18,360 
GAAP General and administrative $ 10,804 9,318 
Less: Stock-based compensation (4,470 (3,629) 
Non-GAAP General and administrative $ 6,334 5,689 
GAAP Operating expenses $ 47,956 43,732 
Less: Stock-based compensation (9,141 (6,817) 
Less: Acquisition-related expenses "” (585 (1,099) 
Less: Amortization of intangible assets (25) (25) 
Non-GAAP Operating expenses $ 38,205 35,791 
GAAP Income from operations $ 19,545 12,943 
Plus: Stock-based compensation 9,729 7,418 
Plus: Acauisition-related expenses oy 585 1,099 
Plus: Amortization of intangible assets 1,520 1,364 
Non-GAAP Income from operations $ 31,379 22,824 
GAAP Net income $ 20,664 14,400 
Plus: Stock-based compensation 9,729 7,418 
Plus: Acquisition-related expenses '") 585 1,099 
Plus: Amortization of intangible assets 1,520 1,364 
Less: Tax adjustment (6,506) (2,945) 
Non-GAAP Net income $ 25,992 $ 21,336 
Non-GAAP Net income per share: 
Basic $ 0.67 $ 0.54 
Diluted $ çë oa ë $ 0.51 
Weighted average shares used in non-GAAP net income per share: 
Basic 39,003 39,200 
Diluted — 4a 41,580 


™ Relates to compensation expense from the acquisition of Adya, Layered Insight, 1Mobility and NetWatcher. 


Twelve Months Ended 
December 31, 

2019 2018 
69,517 $ 66,185 
(2,262) (2,489) 

(3) 
(5,980) (3,625) 
61,272 60,071 

252,090 212,704 
2,262 2,489 

3 s 
5,980 3,625 
260,335 218,818 
68,239 53,255 
(11,151) (7,961 
(2,431) (1,223 
(100) (100 
54,557 43,971 
70,833 70,039 
(4,984) (4,650) 

(5) (1,802 
65,844 63,587 
40,765 39,050 

(16,495) (14,990) 
24,270 24,060 
179,837 162,344 
(32,630) (27,601 
(2,436) (3,025 
(100) (100 
144671 $131,618 
72,253 50,361 
34,892 30,090 
2,439 3,025 
6,080 3,725 
115,664 87,201 
69,336 57,304 
34,892 30,090 
2,439 3,025 
6,080 3,725 
(16,367) (20,723) 
96,380 $ 73,421 
2.47 $ 1.89 
2.33 $ 1.75 
39,075 38,876 
41,345 41,897 


Qualys, Inc. 
RECONCILIATION OF NON-GAAP DISCLOSURES 
FREE CASH FLOWS 
(Unaudited) 
(in thousands) 


Twelve Months Ended 
December 31, 
2019 2018 
GAAP Cash flows provided by operating activities ® $ 160,607 $ 125,464 
Less: 
Purchases of property and equipment 
Principal payments under capital lease obligations 
Non-GAAP Free cash flows 


(27,573) (22,775) 
(1,709) (1,617) 
$ 131,325 $ 101,072 
(1) Includes $4.5 million and $2.0 million of acquisition related expenses paid during the twelve months ended December 31, 2019 
and 2018, respectively. 


Qualys, Inc. 
RECONCILIATION OF NON-GAAP DISCLOSURES 
CALCULATED CURRENT BILLINGS 
(Unaudited) 

(in thousands) 


Three Months Ended December 31, 
GAAP Revenue 


2019 2018 
$ 84,664 $ 74,200 
Plus: Current deferred revenue at December 31 192,172 164,624 
Less: Current deferred revenue at September 30 (180,304) (155,115) 
Non-GAAP Calculated current billings $ 96,532 $ 83,709 
Calculated current billings growth compared to same quarter of prior year 15% 


13% 


